OpenVPN
Functions | Variables
tls_crypt.c File Reference
#include "syshead.h"
#include "argv.h"
#include "base64.h"
#include "crypto.h"
#include "platform.h"
#include "run_command.h"
#include "session_id.h"
#include "ssl.h"
#include "tls_crypt.h"
Include dependency graph for tls_crypt.c:
This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Functions

static struct key_type tls_crypt_kt (void)
 
int tls_crypt_buf_overhead (void)
 Returns the maximum overhead (in bytes) added to the destination buffer by tls_crypt_wrap(). More...
 
void tls_crypt_init_key (struct key_ctx_bi *key, const char *key_file, const char *key_inline, bool tls_server)
 Initialize a key_ctx_bi structure for use with –tls-crypt. More...
 
void tls_crypt_adjust_frame_parameters (struct frame *frame)
 Adjust frame parameters for –tls-crypt overhead. More...
 
bool tls_crypt_wrap (const struct buffer *src, struct buffer *dst, struct crypto_options *opt)
 Wrap a control channel packet (both authenticates and encrypts the data). More...
 
bool tls_crypt_unwrap (const struct buffer *src, struct buffer *dst, struct crypto_options *opt)
 Unwrap a control channel packet (decrypts, authenticates and performs replay checks). More...
 
static void tls_crypt_v2_load_client_key (struct key_ctx_bi *key, const struct key2 *key2, bool tls_server)
 
void tls_crypt_v2_init_client_key (struct key_ctx_bi *key, struct buffer *wkc_buf, const char *key_file, const char *key_inline)
 Initialize a tls-crypt-v2 client key. More...
 
void tls_crypt_v2_init_server_key (struct key_ctx *key_ctx, bool encrypt, const char *key_file, const char *key_inline)
 Initialize a tls-crypt-v2 server key (used to encrypt/decrypt client keys). More...
 
static bool tls_crypt_v2_wrap_client_key (struct buffer *wkc, const struct key2 *src_key, const struct buffer *src_metadata, struct key_ctx *server_key, struct gc_arena *gc)
 
static bool tls_crypt_v2_unwrap_client_key (struct key2 *client_key, struct buffer *metadata, struct buffer wrapped_client_key, struct key_ctx *server_key)
 
static bool tls_crypt_v2_verify_metadata (const struct tls_wrap_ctx *ctx, const struct tls_options *opt)
 
bool tls_crypt_v2_extract_client_key (struct buffer *buf, struct tls_wrap_ctx *ctx, const struct tls_options *opt)
 Extract a tls-crypt-v2 client key from a P_CONTROL_HARD_RESET_CLIENT_V3 message, and load the key into the supplied tls wrap context. More...
 
void tls_crypt_v2_write_server_key_file (const char *filename)
 Generate a tls-crypt-v2 server key, and write to file. More...
 
void tls_crypt_v2_write_client_key_file (const char *filename, const char *b64_metadata, const char *server_key_file, const char *server_key_inline)
 Generate a tls-crypt-v2 client key, and write to file. More...
 

Variables

const char * tls_crypt_v2_cli_pem_name = "OpenVPN tls-crypt-v2 client key"
 
const char * tls_crypt_v2_srv_pem_name = "OpenVPN tls-crypt-v2 server key"
 
static const uint8_t TLS_CRYPT_METADATA_TYPE_USER = 0x00
 Metadata contains user-specified data. More...
 
static const uint8_t TLS_CRYPT_METADATA_TYPE_TIMESTAMP = 0x01
 Metadata contains a 64-bit unix timestamp in network byte order. More...
 

Function Documentation

◆ tls_crypt_kt()

static struct key_type tls_crypt_kt ( void  )
static

◆ tls_crypt_v2_load_client_key()

static void tls_crypt_v2_load_client_key ( struct key_ctx_bi key,
const struct key2 key2,
bool  tls_server 
)
inlinestatic

◆ tls_crypt_v2_unwrap_client_key()

static bool tls_crypt_v2_unwrap_client_key ( struct key2 client_key,
struct buffer metadata,
struct buffer  wrapped_client_key,
struct key_ctx server_key 
)
static

◆ tls_crypt_v2_verify_metadata()

static bool tls_crypt_v2_verify_metadata ( const struct tls_wrap_ctx ctx,
const struct tls_options opt 
)
static

◆ tls_crypt_v2_wrap_client_key()

static bool tls_crypt_v2_wrap_client_key ( struct buffer wkc,
const struct key2 src_key,
const struct buffer src_metadata,
struct key_ctx server_key,
struct gc_arena gc 
)
static

Variable Documentation

◆ TLS_CRYPT_METADATA_TYPE_TIMESTAMP

const uint8_t TLS_CRYPT_METADATA_TYPE_TIMESTAMP = 0x01
static

Metadata contains a 64-bit unix timestamp in network byte order.

Definition at line 48 of file tls_crypt.c.

Referenced by tls_crypt_v2_write_client_key_file().

◆ TLS_CRYPT_METADATA_TYPE_USER

const uint8_t TLS_CRYPT_METADATA_TYPE_USER = 0x00
static

Metadata contains user-specified data.

Definition at line 46 of file tls_crypt.c.

Referenced by tls_crypt_v2_write_client_key_file().

◆ tls_crypt_v2_cli_pem_name

const char* tls_crypt_v2_cli_pem_name = "OpenVPN tls-crypt-v2 client key"

Definition at line 42 of file tls_crypt.c.

Referenced by tls_crypt_v2_init_client_key(), and tls_crypt_v2_write_client_key_file().

◆ tls_crypt_v2_srv_pem_name

const char* tls_crypt_v2_srv_pem_name = "OpenVPN tls-crypt-v2 server key"

Definition at line 43 of file tls_crypt.c.

Referenced by tls_crypt_v2_init_server_key(), and tls_crypt_v2_write_server_key_file().